---
title: The CyberAdvisor Letter
---

An update on Log4j for TDS clients.

| View in browser Special Letter An update on Log4j for TDS clients. Hi there,    You may have heard - on Dec. 9th, a critical internet security flaw was disclosed and named Log4j, and it's been wreaking havoc on the internet ever since. "So far, attackers have exploited the flaw to install cryptominers on vulnerable systems, steal system credentials, burrow deeper within compromised networks, and steal data, according to a recent report from Microsoft."    The Wall Street Journal - Dec.15th    What is Log4j?   To better understand Log4j, think of the internet as an enormous, complex machine with many interacting parts. Each distinct part of the internet must "talk" with the other pieces from servers to computers, cameras, cars, and everything else.   To do this requires a standard language all the various components can "speak," and for much of the internet, this is software known as Java. “Java powers a large share of today’s digital world by providing the reliable platform upon which many services and applications are built.”   Java’s website. ✓ Java calls its software’s logging library “Log4j.” Access to the logging library gives the user administrative power over its system. Thus, the vulnerability is aptly named after Java's logging library. "(Log4j) … allows attackers to execute code remotely on a target computer, meaning that they can steal data, install malware or take control.   Some cybercriminals have installed software that uses a hacked system to mine cryptocurrency, while others have developed malware that allows attackers to hijack computers for large-scale assaults on internet infrastructure."   The Wall Street Journal - Dec.15th What you need to know   At this time, the F-Secure, Rackspace, and OmniWAN products we provide clients are not affected by Log4j.   Clients using F-Secure for device protection and Managed Network Security for their internet service are actively managed and protected from the threat environment as it evolves.   ✓  Cybersecurity that is monitored and managed in real-time is the best defense against Log4j exploits and unknown future threats.   What you need to do   There are only two things a consumer can do to mitigate the risk of Log4j  because the remedial work must be done on the enterprise side of things.    Keep up with software updates. Use cybersecurity defenses that are monitored and managed in real-time.    TDS updates clients' system software for their devices and networks automatically.    And, all our products are enterprise-grade and receive constant attention 24/7/365 to remain optimized and safe from evolving risks.   ✓ Be sure your software is current and all your personal devices and ISP internet network are actively managed from internet risk.   * Take the free ShieldTest to evaluate the security of the network you are on now, here. What's next   I can assure you we will see severe repercussions from the Log4j vulnerability worldwide as the frenzy of exploitation continues into 2022.   Here are the reasons why: So many are at risk with estimates in the 100's of millions of affected devices. The hack is ridiculously easy to perpetrate. There are countless ways to deploy the hack for criminal gain; many no one has even thought of yet. Increased use of AI by hackers in 2022-2023 will discover new Log4j exploits humans would never imagine otherwise. ✓ The worst is undoubtedly yet to come, and the consequences of Log4j will invariably be felt for many years to come. Cybersecurity firm Check Point said Wednesday that it had detected more than 1.8 million attempts to exploit the bug in the days since it became public, with over 46 percent of those coming from known malicious groups.   CNet - Dec.15th   "So far, Log4j has resulted mostly in cryptomining and a little espionage. The really bad stuff is just around the corner."   WIRED - Dec. 16th  Stay in touch with TDS   Stay in touch with us to ensure you use protection across your devices and networks.   We are here for you when you have questions, are suspicious, have concerns, or need advice on privacy and digital security. Be sure to send screenshots when applicable!   We offer complimentary account reviews, risk assessments, and advice for clients, their families, and the referrals they bring to us.    ✓ Consider using one of our "computer coaches" to remote in and help you manage your device settings and preferences. The coach can help you with browser security, password management, backups, and everything you need to stay safe and in control of your personal technology. TDS is here for you   The staff at TDS will be working over the holidays as it is always high season for hackers and cybercrime. Please reach out if you need us; we'll be here for you.   In the meantime, we wish all our clients and their respective families a Merry Christmas and Happy New Year. Thanks for reading and stay in touch, Brad Deflin   Click for browser view and printing   Take the ShieldTest Looking for a cybersecurity webinar or speaker for your group? Reply to this email or click below: Contact       Computer Coaching Services by TDS   Want to clean your computer or set up a new one? Learn to use a password manager or backup files? Perhaps set up your browser or make things flow more easily?   ✓ The coaching approach is about learning life-long skills and thinking critically for increased satisfaction, privacy, and security with personal technology.   Total Digital Security Schedule an account review   Contact us for a complimentary client account review.   Total Digital Security       For previous CyberAdvisor Letters: To view Blog posts: Total Digital Security, 7777 Glades Rd, Suite 100, Boca Raton, Florida 33434, United States, 877-643-6391 Unsubscribe Manage preferences |
| --- |